In one case, a group Google tracks as UNC6993 gained access to LLM API keys, generated additional keys and enabled services within the victim's cloud projects, running up $100,000 in charges. In another, an intruder made more than 500,000 LLM API calls in under eight hours using stolen third-party keys to power a token routing service called Jet Night. Google's Threat Intelligence Group believes Jet Night relies on stolen keys to turn a profit, noting its unlimited token plan costs roughly $60 a month, well below the $100 to $250 such access would typically cost. The service has admitted outages on its public Telegram channel, which Google attributes to stolen keys being revoked as victims discover the compromises.

Google also documented a division of labour in the LLMJacking ecosystem, with some criminals establishing initial access and others, dubbed "LLM Mixers", managing downstream monetisation. In a mid-2026 incident, UNC6993 compromised a cloud instance through a misconfigured service account key and set up a fake application portal that tricked users into pasting raw JSON payloads containing active access tokens, bypassing password and multifactor authentication controls.

John Hultquist, chief analyst at Google Threat Intelligence Group, said threat actors want to use the technology to gain a scale advantage over defenders, "by stealing tokens from unwitting third parties". Google predicts criminals will increasingly prioritise LLMJacking over other resource theft such as cryptojacking, and recommends defenders prioritise identity and access management, centralised secrets management with key rotation, least-privilege access, and automated secrets scanning in codebases.